2003-07-16 20:59:33 +02:00
|
|
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
2002-08-13 22:45:21 +02:00
|
|
|
|
<html>
|
|
|
|
|
|
<head>
|
2003-07-16 20:59:33 +02:00
|
|
|
|
<meta http-equiv="Content-Language" content="en-us">
|
|
|
|
|
|
<meta name="GENERATOR" content="Microsoft FrontPage 5.0">
|
|
|
|
|
|
<meta name="ProgId" content="FrontPage.Editor.Document">
|
|
|
|
|
|
<meta http-equiv="Content-Type"
|
|
|
|
|
|
content="text/html; charset=windows-1252">
|
|
|
|
|
|
<title>Samba</title>
|
2002-08-13 22:45:21 +02:00
|
|
|
|
</head>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<body>
|
2003-12-03 00:51:46 +01:00
|
|
|
|
<h1 style="text-align: center;">Samba/SMB<br>
|
|
|
|
|
|
</h1>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<p>If you wish to run Samba on your firewall and access shares between
|
|
|
|
|
|
the firewall and local hosts, you need the following rules:</p>
|
2002-08-13 22:45:21 +02:00
|
|
|
|
<h4>/etc/shorewall/rules:</h4>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<blockquote> <font face="Century Gothic, Arial, Helvetica"> </font>
|
2003-07-16 20:59:33 +02:00
|
|
|
|
<table border="2" cellpadding="2" style="border-collapse: collapse;">
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<tbody>
|
2003-07-16 20:59:33 +02:00
|
|
|
|
<tr>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<td><b>ACTION</b></td>
|
|
|
|
|
|
<td><b>SOURCE</b></td>
|
|
|
|
|
|
<td><b>DEST</b></td>
|
|
|
|
|
|
<td><b> PROTO</b></td>
|
|
|
|
|
|
<td><b>DEST<br>
|
|
|
|
|
|
PORT(S)</b></td>
|
|
|
|
|
|
<td><b>SOURCE<br>
|
|
|
|
|
|
PORT(S)</b></td>
|
|
|
|
|
|
<td><b>ORIGINAL<br>
|
|
|
|
|
|
DEST</b></td>
|
|
|
|
|
|
</tr>
|
|
|
|
|
|
<tr>
|
|
|
|
|
|
<td>ACCEPT</td>
|
|
|
|
|
|
<td>fw</td>
|
|
|
|
|
|
<td>loc</td>
|
|
|
|
|
|
<td>udp</td>
|
|
|
|
|
|
<td>137:139</td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
</tr>
|
|
|
|
|
|
<tr>
|
|
|
|
|
|
<td>ACCEPT</td>
|
|
|
|
|
|
<td>fw</td>
|
|
|
|
|
|
<td>loc</td>
|
|
|
|
|
|
<td>tcp</td>
|
|
|
|
|
|
<td>137,139,445</td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
</tr>
|
|
|
|
|
|
<tr>
|
|
|
|
|
|
<td>ACCEPT</td>
|
|
|
|
|
|
<td>fw</td>
|
|
|
|
|
|
<td>loc</td>
|
|
|
|
|
|
<td>udp</td>
|
|
|
|
|
|
<td>1024:</td>
|
|
|
|
|
|
<td>137</td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
</tr>
|
|
|
|
|
|
<tr>
|
|
|
|
|
|
<td>ACCEPT</td>
|
|
|
|
|
|
<td>loc</td>
|
|
|
|
|
|
<td>fw</td>
|
|
|
|
|
|
<td>udp</td>
|
|
|
|
|
|
<td>137:139</td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
</tr>
|
|
|
|
|
|
<tr>
|
|
|
|
|
|
<td>ACCEPT</td>
|
|
|
|
|
|
<td>loc</td>
|
|
|
|
|
|
<td>fw</td>
|
|
|
|
|
|
<td>tcp</td>
|
|
|
|
|
|
<td>137,139,445</td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
</tr>
|
|
|
|
|
|
<tr>
|
|
|
|
|
|
<td>ACCEPT</td>
|
|
|
|
|
|
<td>loc</td>
|
|
|
|
|
|
<td>fw</td>
|
|
|
|
|
|
<td>udp</td>
|
|
|
|
|
|
<td>1024:</td>
|
|
|
|
|
|
<td>137</td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
</tr>
|
2003-07-16 20:59:33 +02:00
|
|
|
|
</tbody>
|
|
|
|
|
|
</table>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
</blockquote>
|
2003-12-03 00:51:46 +01:00
|
|
|
|
<p>To pass traffic SMB/Samba traffic between zones Z1 and Z2:</p>
|
|
|
|
|
|
<h4>/etc/shorewall/rules:</h4>
|
|
|
|
|
|
<blockquote> <font face="Century Gothic, Arial, Helvetica"> </font>
|
|
|
|
|
|
<table border="2" cellpadding="2" style="border-collapse: collapse;">
|
|
|
|
|
|
<tbody>
|
|
|
|
|
|
<tr>
|
|
|
|
|
|
<td><b>ACTION</b></td>
|
|
|
|
|
|
<td><b>SOURCE</b></td>
|
|
|
|
|
|
<td><b>DEST</b></td>
|
|
|
|
|
|
<td><b> PROTO</b></td>
|
|
|
|
|
|
<td><b>DEST<br>
|
|
|
|
|
|
PORT(S)</b></td>
|
|
|
|
|
|
<td><b>SOURCE<br>
|
|
|
|
|
|
PORT(S)</b></td>
|
|
|
|
|
|
<td><b>ORIGINAL<br>
|
|
|
|
|
|
DEST</b></td>
|
|
|
|
|
|
</tr>
|
|
|
|
|
|
<tr>
|
|
|
|
|
|
<td>ACCEPT</td>
|
|
|
|
|
|
<td>Z1<br>
|
|
|
|
|
|
</td>
|
|
|
|
|
|
<td>Z2<br>
|
|
|
|
|
|
</td>
|
|
|
|
|
|
<td>udp</td>
|
|
|
|
|
|
<td>137:139</td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
</tr>
|
|
|
|
|
|
<tr>
|
|
|
|
|
|
<td>ACCEPT</td>
|
|
|
|
|
|
<td>Z1<br>
|
|
|
|
|
|
</td>
|
|
|
|
|
|
<td>Z2<br>
|
|
|
|
|
|
</td>
|
|
|
|
|
|
<td>tcp</td>
|
|
|
|
|
|
<td>137,139,445</td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
</tr>
|
|
|
|
|
|
<tr>
|
|
|
|
|
|
<td>ACCEPT</td>
|
|
|
|
|
|
<td>Z1<br>
|
|
|
|
|
|
</td>
|
|
|
|
|
|
<td>Z2<br>
|
|
|
|
|
|
</td>
|
|
|
|
|
|
<td>udp</td>
|
|
|
|
|
|
<td>1024:</td>
|
|
|
|
|
|
<td>137</td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
</tr>
|
|
|
|
|
|
<tr>
|
|
|
|
|
|
<td>ACCEPT</td>
|
|
|
|
|
|
<td>Z2<br>
|
|
|
|
|
|
</td>
|
|
|
|
|
|
<td>Z1<br>
|
|
|
|
|
|
</td>
|
|
|
|
|
|
<td>udp</td>
|
|
|
|
|
|
<td>137:139</td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
</tr>
|
|
|
|
|
|
<tr>
|
|
|
|
|
|
<td>ACCEPT</td>
|
|
|
|
|
|
<td>Z2<br>
|
|
|
|
|
|
</td>
|
|
|
|
|
|
<td>Z1<br>
|
|
|
|
|
|
</td>
|
|
|
|
|
|
<td>tcp</td>
|
|
|
|
|
|
<td>137,139,445</td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
</tr>
|
|
|
|
|
|
<tr>
|
|
|
|
|
|
<td>ACCEPT</td>
|
|
|
|
|
|
<td>Z2<br>
|
|
|
|
|
|
</td>
|
|
|
|
|
|
<td>Z1<br>
|
|
|
|
|
|
</td>
|
|
|
|
|
|
<td>udp</td>
|
|
|
|
|
|
<td>1024:</td>
|
|
|
|
|
|
<td>137</td>
|
|
|
|
|
|
<td> </td>
|
|
|
|
|
|
</tr>
|
|
|
|
|
|
</tbody>
|
|
|
|
|
|
</table>
|
|
|
|
|
|
</blockquote>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
To make network browsing ("Network Neighborhood") work properly between
|
|
|
|
|
|
Z1 and Z2 requires a Windows Domain Controller and/or a WINS server. I
|
|
|
|
|
|
run Samba on my firewall to handle browsing between two zones connected
|
|
|
|
|
|
to my firewall. Details are <a href="myfiles.htm">here</a>.<br>
|
|
|
|
|
|
<p><font size="2">Last modified 10/22/2002 - <a href="support.htm">Tom
|
2003-10-07 00:38:40 +02:00
|
|
|
|
Eastep</a></font></p>
|
2003-07-16 20:59:33 +02:00
|
|
|
|
<p><font face="Trebuchet MS"><a href="copyright.htm"> <font size="2">Copyright</font>
|
|
|
|
|
|
<EFBFBD> <font size="2">2002 Thomas M. Eastep.</font></a></font></p>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</body>
|
|
|
|
|
|
</html>
|
